Coldgen Coldusergroup vulnerabilities
2 known vulnerabilities affecting coldgen/coldusergroup.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2010-4916P3HIGHCVSS 7.5PoCv1.062011-10-08
CVE-2010-4916 [HIGH] CWE-89 CVE-2010-4916: Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attac
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
nvd
CVE-2010-4913P4MEDIUMCVSS 4.3PoCv1.062011-10-08
CVE-2010-4913 [MEDIUM] CWE-79 CVE-2010-4913: Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows
Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information.
nvd